re: About Blank Sunday, February 13, 2005 at 4:16 pm Windows XP Annoyances Discussion Forum Posted by Falcon (13489 messages posted) Unzip HijackThis to a permanent folder. It makes backups. Uninstall New.Net from Add/Remove Programs, if present. Download LSPFix: http://www.cexx.org/lspfix.htm Reboot to Safe Mode Run CWShredder again. Check these entries in HijackThis and press Fix: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\Chris\LOCALS~1\Temp\se.dll/sp.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.seekerbar.com/ie.aspx?tb_id=50154 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\Chris\LOCALS~1\Temp\se.dll/sp.html R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file) O2 - BHO: (no name) - {2D7655EA-1539-469C-A7CA-3E92E79D9D34} - C:\WINDOWS\system32\gheg.dll O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s O4 - HKLM\..\Run: [sp] rundll32 C:\DOCUME~1\Chris\LOCALS~1\Temp\se.dll,DllInstall O4 - Startup: PowerReg Scheduler V3.exe O18 - Filter: text/html - {EFFF58D0-CF24-4B4C-960D-5ECCBAAFCCBA} - C:\WINDOWS\system32\gheg.dll O18 - Filter: text/plain - {EFFF58D0-CF24-4B4C-960D-5ECCBAAFCCBA} - C:\WINDOWS\system32\gheg.dll Run LSPFix, check the "I know what I'm doing" box, and mark these files for removal: All containing the word "newdotnet" Delete these files and folders. Make sure hidden and system files are visible, as well as file extentions, under Control Panel->Folder Options->View tab. C:\Documents and Settings\Chris\Local Settings\Temp\ <-- All files in folder, but not folder. C:\WINDOWS\system32\gheg.dll C:\Program Files\NewDotNet\ Reboot normally and post another HijackThis log. The Wereotter Written in response to: re: About Blank (Tony: Sunday, February 13, 2005 at 3:48 pm) Responses to this message: re: About Blank (Tony: Sunday, February 13, 2005 at 8:15 pm) re: About Blank (Jimho: Monday, March 14, 2005 at 1:00 pm) All messages in this thread [show all] About Blank (Tony: Sat, Feb 12, 2005, 4:38 pm) re: About Blank (Steve: Sat, Feb 12, 2005, 4:47 pm) re: About Blank (Sgt: Sat, Feb 12, 2005, 4:48 pm) re: About Blank (Falcon: Sat, Feb 12, 2005, 5:12 pm) re: About Blank (Rich Kurtz: Sat, Feb 12, 2005, 6:32 pm) re: About Blank (Falcon: Sat, Feb 12, 2005, 6:44 pm) re: About Blank (Tony: Sun, Feb 13, 2005, 3:48 pm) re: About Blank (Falcon: Sun, Feb 13, 2005, 4:16 pm) re: About Blank (Tony: Sun, Feb 13, 2005, 8:15 pm) re: About Blank (Falcon: Mon, Feb 14, 2005, 5:49 am) re: About Blank (Tony: Mon, Feb 14, 2005, 12:52 pm) re: About Blank (Jimho: Mon, Mar 14, 2005, 1:00 pm) re: About Blank (joe: Sat, Feb 12, 2005, 5:55 pm) re: About Blank (Flopdogg: Sat, Feb 12, 2005, 7:59 pm) re: About Blank (joe: Sat, Feb 12, 2005, 8:18 pm) re: About Blank (Falcon: Sun, Feb 13, 2005, 4:13 am) Reply or follow-up to this message Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum